Senior Data Security Engineer

Brightstar is an innovative, forward-thinking global leader in lottery that builds on our renowned expertise in delivering secure technology and producing reliable, comprehensive solutions for our customers. As a premier pure play global lottery company, our best-in-class lottery operations, retail and digital solutions, and award-winning lottery games enable our customers to achieve their goals, fulfill player needs and distribute meaningful benefits to communities. Brightstar has a well-established local presence and is a trusted partner to governments and regulators around the world, creating value by adhering to the highest standards of service, integrity, and responsibility. Brightstar has approximately 6,000 employees. For more information, please visit

Responsibilities

We are seeking a Senior Data Security Engineer to architect and develop initiatives to protect sensitive and regulated data across cloud and hybrid environments. This role is highly technical, requiring expertise in Data Security Posture Management (DSPM), encryption, DLP, and data classification. The ideal candidate will drive the implementation of data security frameworks, monitor data activity, and enforce controls to mitigate data exfiltration and regulatory risks.

Key Responsibilities:

• Implement DSPM tools and integrate them with cloud-native telemetry to continuously assess and remediate data risks.
• Architect scalable encryption strategies (at rest, in transit, in use) and key management using KMS, HSMs, and customer-managed keys (CMKs).
• Develop and enforce enterprise-wide data classification and tagging frameworks to support automated data discovery and protection.
• Design and implement cross-platform DLP policies and integrate them with Microsoft Purview, M365, endpoints, and cloud workloads.
• Enforce least-privilege access models and granular access controls (e.g., ABAC, PBAC, RBAC) across structured and unstructured data stores.
• Collaborate with cloud, identity, and app security teams to integrate data protection controls into existing pipelines and services.
• Monitor compliance with GDPR, HIPAA, CCPA, and other regulatory frameworks through proactive security audits and reporting.

Qualifications

• 5+ years of data security engineering experience in cloud-first and hybrid environments.
• Deep understanding of DSPM tools and data-centric security principles.
• Expertise in encryption architecture, key management systems, and securing data at all lifecycle stages.
• Hands-on experience with DLP solutions (e.g., Varonis, Microsoft Purview, Forcepoint, Symantec) and their integration across cloud and endpoint systems.
• Proficient in data access control mechanisms and governance across relational, NoSQL, and unstructured data stores.
• Familiarity with compliance requirements (GDPR, PCI, CCPA) and security frameworks like NIST and ISO 27001.
• Certifications such as CCSP, CISSP, or data security-specific credentials are preferred.

Keys to Success
Building collaborative relationships
Decision making
Drive results
Foster innovation
Personal energy
Self-leadership

#LI-KM1 #LI-USREMOTE

At Brightstar, we consider a wide range of factors in determining compensation, including background, skills, experience, and work location. These factors can cause your compensation to vary. The estimated starting compensation range is $55,795 - $122,400. The actual pay offered may end up being higher or lower. The Company will comply with all local pay requirements and collective bargaining agreements, where applicable.

Base pay is only one part of our Total Rewards program. Sales roles may be eligible for commission payments, while other roles are eligible for discretionary bonuses. In addition, we offer employees a 401(k) Savings Plan with Company contributions, health, dental, and vision insurance, life, accident, and disability insurance, tuition reimbursement, paid time off, wellness programs, and identity theft insurance. Note: programs are subject to eligibility requirements.

All Brightstar employees have a role in information security. Annual training will be assigned and required as appropriate.